Module Learning Objective

organise a timetable combining obligations and checks based on risk

1. Regulatory Concept & Core Standards

This video's topic is an annual monitoring plan. By the end, you should be able to organise a timetable combining obligations and checks based on risk. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Receipt and follow-up require a mandate, impartiality and resources. They may connect with integrity coordination, but the functions are not automatically identical. This course organises decisions, cover arrangements and management information according to the local framework.

An annual plan connects applicable obligations, risks and resources. It may include control reviews, training, cover and channel operation checks. Internal frequency serves management needs. Statutory deadlines must be identified separately. Gathering evidence throughout the year avoids concentrating all work on preparing a report.

Apply the following rule: For the internal channel, acknowledge receipt within seven days of receiving the report. Provide feedback on follow-up within three months of acknowledgement. If no acknowledgement was sent, calculate the deadline from the end of the seven-day period following receipt. Feedback does not mean that a complex investigation has been completed.

2. Practical Implementation & Procedure

List applicable national obligations separately from internal preparation dates. Allow time for collection, validation and decisions. Include higher-risk checks and actions arising from earlier cases. Identify the source, owner and evidence for each task. Legislative changes should trigger review of tasks and training content. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A fictional plan puts every check on the last day of the quarter. An absence prevents message approval and delays follow-up. The coordinator distributes collection across the period, appoints cover and separates statutory dates from internal meetings. Monitoring can proceed without exposing case contents to the whole management team. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does a change in external reporting obligations remove the need for regular internal monitoring? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Internal monitoring remains necessary. Changing external reporting does not remove the need to check controls and measures. The plan must reflect national duties that actually apply and update its legal and institutional references.

One mistake to avoid is: copying last year's timetable without reviewing regulatory changes and risk priorities.

Now apply the national rule to a second decision. The platform uses a fixed 90-day period for every country, starting when someone opens the message. Can this setting be retained?

Not without validating the local rule. Use the correct starting event and unit, distinguish acknowledgement from follow-up and allow only permitted extensions. Test receipt outside working hours, month-end dates and the responsible person's absence. Opening a message does not automatically change the legal date of receipt.

National Legal Framework: HinSchG (Hinweisgeberschutzgesetz), transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.